sepolicy: Allow init to create xcap sockets

I auditd  : type=1400 audit(0.0:191): avc: denied { create } for comm="init" name="vendor.xcap" scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0

Change-Id: I44fade622638a8ea64afcb6569515ca2c231c84c
This commit is contained in:
SamarV-121 2022-09-14 09:15:40 +05:30
parent 8c706294c1
commit 6c1dc1cc06
No known key found for this signature in database
GPG Key ID: EA4EF623926E2FAE
3 changed files with 5 additions and 0 deletions

View File

@ -642,6 +642,8 @@ type thermal_hal_socket, file_type;
# thermal core socket file
type thermal_socket, file_type;
type xcap_socket, file_type;
# Data : 2021/08/24
# Operaton: S development
# Purpose: Add permission for node /proc/dma_heap

View File

@ -402,6 +402,8 @@
/dev/socket/thermal_socket(/.*)? u:object_r:thermal_socket:s0
/dev/socket/thermal_hal_socket(/.*)? u:object_r:thermal_hal_socket:s0
/dev/socket/vendor.xcap(/.*)? u:object_r:xcap_socket:s0
/dev/stpant(/.*)? u:object_r:stpant_device:s0
/dev/stpbt(/.*)? u:object_r:stpbt_device:s0
/dev/fw_log_bt u:object_r:fw_log_bt_device:s0

View File

@ -146,3 +146,4 @@ domain_auto_trans(init, postinstall_file, update_engine)
allow init sysfs_mtk_core_ctl:dir r_dir_perms;
allow init sysfs_mtk_core_ctl:file rw_file_perms;
allow init xcap_socket:sock_file create_file_perms;